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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1 308. 

1 . This communication is responsive to 09/01/2009 . 

2. The allowed claim(s) is/are 1,3,5,6,23-25,27-34,37 and 38 . 

3. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) DAN b)DSome* c) □ None of the: 

1. D Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. O Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 
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EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Syed Jafar Ali Reg. No. 58780 on 10/29/2009. 

The application has been amended as follows: 

1 . (Currently Amended) A method performed on a computer for reactive and deliberative 
service level management, comprising: 

providing a service over a network having a plurality of network components that support 
the service, wherein performance of the service depends on performances of the plurality of 
network components that support the service, and wherein the service has a state that represents 
whether the performance of the service meets or exceeds a service level identified in a service 
level agreement; 

extracting a plurality of one or more component parameter values from the plurality of 
network components that support the service across a plurality of domains of the network using a 
plurality of sensors respectively coupled to the plurality of network components that support the 
service; 

monitoring the plurality of component parameter values extracted from the plurality of 
network components that support the service using a .plurality of monitoring agents, wherein 
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each of the plurality of monitoring agents are configured to monitor a subset of the plurality of 
extracted component parameter values in a respective one domain of [[a]] the plurality of 
domains of the network, detect one or more intra-domain events in the respective domain as a 
function of the component parameter values monitored in the respective domain, and generate 
one or more intra-domain alarms in the respective domain as a function of the intra- domain 
events detected in the respective domain; 

correlating the intra-domain alarms that each of the plurality of monitoring agents 
generate generated in each .of the respective plurality of domains of the network using an alarm 
correlation agent, wherein the alarm correlation agent is configured to correlate the intra-domain 
alarms generated in each of the respective domains of the network t o generate one or more inter- 
domain alarms across the plurality of domains of the network; and 

analyzing causes of the intra-domain alarms generated in each of the respective domains 
of the network and the inter-domain alarms generated across the plurality of domains of the 
network u sing an enterprise management system, wherein the intra-domain alarms and the inter- 
domain alarms indicate one or more of a degradation or a potential degradation in the 
performance of the service relative to the service level identified in the service level agreement. 

3. (Currently Amended) The method of claim 1, further comprising: 

mapping the inter-domain alarms generated across the plurality of domains of the 
network to a service parameter that represents the state of the service, wherein the service 
parameter has a value that indicates whether the performance of the service meets or exceeds the 
service level identified in the service level agreement; and 
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displaying information relating to the the service, wherein the displayed information 
includes at least one of availability, faults, configuration, integrity, security, reliability, 
performance, or the service level associated with the service. 

23. (Currently Amended) A method performed on a computer for reactive and deliberative 
service level management, comprising: 

providing a service over a network having a plurality of network components that support 
the service, wherein performance of the service depends on performances of the plurality of 
network components that support the service, and wherein the service has a state expressed as a 
range of numeric values that represent whether the performance of the service meets or exceeds a 
service level identified in a service level agreement; 

extracting a plurality of one or more component parameter values from the plurality of 
network components that support the service across a plurality of domains of the network 
using a plurality of sensors respectively coupled to the plurality of network components that 
support the service; 

monitoring the plurality of component parameter values extracted from the plurality of 
network components that support the service using a plurality of monitoring agents, wherein 
each of t he plurality of monitoring agents are configured to monitor a subset of the plurality of 
extracted component parameter values in a respective one of the plurality of domains of the 
network, detect one or more intra-domain events in the respective domain as a function of the 
monitored subset of the component parameter values monitored in the respective domain. 
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and generate one or more intra-domain alarms in the respective domain as a function of the 
detected intra-domain events detected in the respective domain ; 

correlating the intra-domain alarms that each of generated by t he plurality of 
monitoring agents generate in each of the respective domains of the network using an alarm 
correlation agent, wherein the alarm correlation agent is configured to correlate the intra- 
domain alarms generated in each of the respective domains of the network to generate one or 
more inter-domain alarms across [[a]] the plurality of domains of the network; 

mapping the inter-domain alarms generated across the plurality of domains of the 
network to a service parameter that represents the state of the service, wherein the service 
parameter has a numeric value in the range of numeric values that indicates whether the 
performance of the service meets or exceeds the service level identified in the service level 
agreement; and 

monitoring the numeric value of the service parameter using an enterprise 
management system to provide service level management for the service provided over the 
network. 

27. (Currently Amended) The method of claim 23, further comprising: 

determining that the numeric value of the service parameter indicates one or more of a 

degradation, a potential degradation, or an imminent degradation in the performance of the 

service relative to the service level identified in the service level agreement; and 

issuing one or more instructions that effect a change to one or more of the component 

parameter values in response to determining that the numeric value of the service parameter 
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indicates any of the the degradation, the potential degradation, or the imminent degradation in 
the performance of the service relative to the service level identified in the service level 
agreement, wherein the one or more instructions autonomously cause the numeric value of the 
service parameter to meet or exceed the service level identified in the service level agreement. 

37. (Currently Amended) A hardware system for reactive and deliberative service level 
management, comprising: 

a network having a plurality of network components that support a service provided 
over the network, wherein performance of the service depends upon performances of the 
plurality of network components that support the service, and wherein the service has a state, 
that represents whether the performance of the service meets or exceeds a service level " 
identified in a service level agreement; 

a plurality of sensors respectively coupled to the plurality of network components that 
support the service, wherein the plurality of sensors are configured to extract a plurality of o ne 
or more component parameter values from the plurality of network components that support 
the service across a plurality of domains of the network ; 

a plurality of monitoring agents communicatively coupled to the plurality of sensors, 
wherein each of the plurality of monitoring agents are configured to: 

monitor a subset of plurality of the extracted component parameter values in a 
respective one domain of [[a]] the plurality of domains of the network; 

detect one or more intra-domain events in the respective domain as a function 
of the component parameter values monitored in the respective domain; and 



Application/Control Number: 09/577,224 Page 7 

Art Unit: 2443 

generate one or more intra-domain alarms in the respective domain as a function of the 
intra-domain events detected in the respective domain; 

an alarm correlation agent configured to correlate the intra-domain alarms that each of 
the plurality of monitoring agents generate generated in each of the respective p lurality of 
domains of the network to generate one or more inter-domain alarms across the plurality of 
domains of the network; and 

an enterprise management system configured to analyze causes of the intra-domain 
alarms generated in each of the respective domains of the network and the inter-domain alarms 
generated across the plurality of domains of the network , wherein the intra-domain alarms and 
the inter-domain alarms indicate one or more of a degradation or a potential degradation in the 
performance of the service relative to the service level identified in the service level agreement. 

38. (Currently Amended) A hardware system for reactive and deliberative service level 
management, comprising: 

a network having a plurality of network components that support a service provided over 
the network, wherein performance of the service depends upon performances of the plurality of 
network components that support the service, and wherein the service has a state expressed as a 
range of numeric values that represent whether the performance of the service meets or exceeds a 
service level identified in a service level agreement; 

a plurality of sensors respectively coupled to the plurality of network components that 
support the service, wherein the plurality of sensors are configured to extract a plurality of em er- 
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mere-component parameter values from the plurality of network components that support the 
service across a plurality of domains of the network; 

a plurality of monitoring agents communicatively coupled to the plurality of sensors, 
wherein the plurality of monitoring agents are configured to: 

monitor a subset of the plurality of extracted component parameter values in a respective 
one of the plurality of domains of the network; 

detect one or more intra-domain events in the respective domain as a function of the 
monitored subset of the component parameter values monitored in the respective domain; and 

generate one or more intra-domain alarms in the respective domain as a function of the 
detected intra-domain events detected in the respective domain; 

an alarm correlation agent configured to correlate the intra-domain alarms that each of 
generated by the plurality of monitoring agents generate in each of the respective domains of the 
network t o generate one or more inter-domain alarms across [[a]] the plurality of domains of the 
network; and 

an enterprise management system configured to: 

map the inter-domain alarms generated across the plurality of domains of the network to 
a service parameter that represents the state of the service, wherein the service parameter has a 
numeric value in the range of numeric values that indicates whether the performance of the 
service meets or exceeds the service level identified in the service level agreement; and 

monitor the numeric value of the service parameter to provide service level management 
for the service provided over the network. 
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2. The following is an examiner's statement of reasons for allowance: (Maccabee et al. 
6108700, Roytman et al. 6356282 and Madhat et al. 6314103), does not teach nor suggest in 
detail, a method or system for reactive and deliberative service level management, comprising: 
providing a service over a network having a plurality of network components that support the 
service, wherein performance of the service depends on performances of the plurality of network 
components that support the service, and wherein the service has a state that represents whether 
the performance of the service meets or exceeds a service level identified in a service level 
agreement; extracting a plurality of component parameter values from the plurality of network 
components that support the service across a plurality of domains of the network using a 
plurality of sensors respectively coupled to the plurality of network components that support the 
service; monitoring the plurality of component parameter values extracted from the plurality of 
network components that support the service using a .plurality of monitoring agents, wherein 
each of the plurality of monitoring agents are configured to monitor a subset of the plurality of 
extracted component parameter values in a respective one of the plurality of domains of the 
network, detect one or more intra-domain events in the respective domain as a function of the 
component parameter values monitored in the respective domain, and generate one or more intra- 
domain alarms in the respective domain as a function of the intra- domain events detected in the 
respective domain; correlating the intra-domain alarms that each of the plurality of monitoring 
agents generate in each .of the respective domains of the network using an alarm correlation 
agent, wherein the alarm correlation agent is configured to correlate the intra-domain alarms 
generated in each of the respective domains of the network to generate one or more inter-domain 
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alarms across the plurality of domains of the network; and analyzing causes of the intra-domain 
alarms generated in each of the respective domains of the network and the inter-domain alarms 
generated across the plurality of domains of the network using an enterprise management system, 
wherein the intra-domain alarms and the inter-domain alarms indicate one or more of a 
degradation or a potential degradation in the performance of the service relative to the service 
level identified in the service level agreemen t," as argued by the Applicant (see Specification as 
of 09/26/2000, pages 28, 40-44, 47 - 57, 60 - 81; and Drawings dated 05/23/2000, Figures 10 - 
20 and 27 - 34 of Applicant's enabling portions of the specification and drawings). 

Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays, should preferably accompany the issue 
fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 
Allowance." 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to DAVID E. ENGLAND whose telephone number is (571)272- 
3912. The examiner can normally be reached on Mon-Thur, 7:30-5:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Tonia Dollinger can be reached on 571-272-4170. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

David E. England 
Primary Examiner 
Art Unit 2443 

/David E. England/ 

Primary Examiner, Art Unit 2443 



